diff options
| author | Ed Tanous <ed.tanous@intel.com> | 2019-10-11 00:33:54 +0300 |
|---|---|---|
| committer | Ed Tanous <ed.tanous@intel.com> | 2019-10-21 23:25:08 +0300 |
| commit | 8251ffee18bc18b7cdda281b3ec137023aa79303 (patch) | |
| tree | 13e8e75db89cb31bb595723f758fe4cc319fb954 /include/obmc_console.hpp | |
| parent | 1f56a3a6031ba5992d52532cf2d32c76253c9167 (diff) | |
| download | bmcweb-8251ffee18bc18b7cdda281b3ec137023aa79303.tar.xz | |
Add "requires" handlers to all non-trivial routes
This commit is the result of an audit to add user levels to the various
components that need them. As written:
KVM requires admin privilege
Virtual media requires admin privilege
image upload requires admin privilege
/subscribe API requies Login privilege
Signed-off-by: Ed Tanous <ed.tanous@intel.com>
Change-Id: I6384f23769a5ac23f653519656721da7373f088f
Diffstat (limited to 'include/obmc_console.hpp')
| -rw-r--r-- | include/obmc_console.hpp | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/obmc_console.hpp b/include/obmc_console.hpp index b8afba6d71..b545f960e1 100644 --- a/include/obmc_console.hpp +++ b/include/obmc_console.hpp @@ -104,6 +104,7 @@ void connectHandler(const boost::system::error_code& ec) void requestRoutes(CrowApp& app) { BMCWEB_ROUTE(app, "/console0") + .requires({"ConfigureComponents", "ConfigureManager"}) .websocket() .onopen([](crow::websocket::Connection& conn) { BMCWEB_LOG_DEBUG << "Connection " << &conn << " opened"; |